Skills/ClawHub/codivupload-social-manager

codivupload-social-manager@1.0.17

VERIFIED· install only

Publisher claims: "Social media scheduler, cross-poster, and content calendar for OpenClaw. Schedule social media posts, publish content, cross-post to multiple platforms, auto..." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher codivion · publishing for 192 daysInstalls 1,384Last detonated 24 min ago
$clawhub install codivupload-social-manager
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-14 and scored it 81/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

HIGH
Prompting user to enter sensitive credentialsSKILL.md:264 · Prompting user to enter sensitive credentials — social engineering- Do **not** rotate, reveal, or paste the API key in chat or in any output the user did not explicitly request.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST03
MEDIUM
npx invocation of non-well-known packageSKILL.md:230 · npx invocation of non-well-known package — may execute untrusted code3. **MCP server** — `npx codivupload-mcp` adds posting tools to Claude/ChatGPT/Cursor/Zed (optional, version-pinned)Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:286 · npx invocation of non-well-known package — may execute untrusted code- **Avoid `npx -y codivupload-mcp` without a pinned version** — the `-y` flag auto-accepts any version that resolves, which is a bad fit for a credentialed runtime.Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionSKILL.md:755 · File type combined with upload action — agent may exfiltrate local data files- llms.txt — https://codivupload.com/llms.txtFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packageSKILL.md:234 · npx invocation of non-well-known package — may execute untrusted code…ols over describing the API. If MCP is not configured, fall back to suggesting `npx [email protected]` setup or providing exact `curl`/SDK code **for the user to review and run thems…Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Image alt text carrying instructionsREADME.md:9 · Image alt text carrying instructionsGet an API key — Starter $20/moFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
MEDIUM
npx invocation of non-well-known packageSKILL.md:295 · npx invocation of non-well-known package — may execute untrusted code- `node` (≥18) — for the optional MCP server (`npx codivupload-mcp`) and for any inline JavaScript execFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:323 · npx invocation of non-well-known package — may execute untrusted code- On-demand (avoid for credentialed runtimes): if you must use `npx`, pass the same exact version: `npx -y [email protected]`. Do not run unattended `npx` against floating ranges.Fix: Pin versions and sources; vendor anything fetched at install time.
AST06

Cost to the agent

Instructions loaded
≈14,056 tok
1 file · 3 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

codivupload-social-manager@1.0.17 safety verdict: Verified (install only) — KillerSkills